Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 617166 - www-client/firefox-53.0: widevinecdm broken
Summary: www-client/firefox-53.0: widevinecdm broken
Status: RESOLVED OBSOLETE
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Mozilla Gentoo Team
URL:
Whiteboard:
Keywords:
: 618064 (view as bug list)
Depends on:
Blocks:
 
Reported: 2017-05-01 06:51 UTC by Gino McCarty
Modified: 2017-08-26 17:57 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Gino McCarty 2017-05-01 06:51:09 UTC 
After upgrading to firefox-53, now I can no longer play any DRM content, widevine crashes with the following output

```
Sandbox: seccomp sandbox violation: pid 23354, syscall 28, args 140711372521472 2097152 15 1612 140711374618960 0.  Killing process.
Sandbox: crash reporter is disabled (or failed); trying stack trace:
Sandbox: frame #01: madvise[/lib64/libc.so.6 +0xe3427]
Sandbox: frame #02: ???[/usr/lib64/firefox/plugin-container +0x2a0db]
Sandbox: frame #03: ???[/usr/lib64/firefox/plugin-container +0x1f857]
Sandbox: frame #04: ???[/usr/lib64/firefox/plugin-container +0x1e59f]
Sandbox: frame #05: ???[/usr/lib64/firefox/plugin-container +0x203ce]
Sandbox: frame #06: ???[/usr/lib64/firefox/libxul.so +0x99c3c6]
Sandbox: frame #07: ???[/usr/lib64/firefox/libxul.so +0x19d3afc]
Sandbox: frame #08: ???[/usr/lib64/firefox/libxul.so +0x19d3b1b]
Sandbox: frame #09: ???[/home/grey/.mozilla/firefox/main/gmp-widevinecdm/1.4.8.903/libwidevinecdm.so +0x15cb1f]
Sandbox: frame #10: ???[/home/grey/.mozilla/firefox/main/gmp-widevinecdm/1.4.8.903/libwidevinecdm.so +0x15db02]
Sandbox: frame #11: ???[/home/grey/.mozilla/firefox/main/gmp-widevinecdm/1.4.8.903/libwidevinecdm.so +0x15c733]
Sandbox: frame #12: ???[/home/grey/.mozilla/firefox/main/gmp-widevinecdm/1.4.8.903/libwidevinecdm.so +0x15b693]
Sandbox: frame #13: ???[/home/grey/.mozilla/firefox/main/gmp-widevinecdm/1.4.8.903/libwidevinecdm.so +0x15b779]
Sandbox: frame #14: ???[/home/grey/.mozilla/firefox/main/gmp-widevinecdm/1.4.8.903/libwidevinecdm.so +0x524bc]
Sandbox: frame #15: ???[/usr/lib64/firefox/libxul.so +0x19d44af]
Sandbox: frame #16: ???[/usr/lib64/firefox/libxul.so +0x19c6432]
Sandbox: frame #17: ???[/usr/lib64/firefox/libxul.so +0xc7143d]
Sandbox: frame #18: ???[/usr/lib64/firefox/libxul.so +0xc5db69]
Sandbox: frame #19: ???[/usr/lib64/firefox/libxul.so +0xc17164]
Sandbox: frame #20: ???[/usr/lib64/firefox/libxul.so +0xc1d9c4]
Sandbox: frame #21: ???[/usr/lib64/firefox/libxul.so +0xc1e9b6]
Sandbox: frame #22: ???[/usr/lib64/firefox/libxul.so +0xc1eb07]
Sandbox: frame #23: ???[/usr/lib64/firefox/libxul.so +0xc00875]
Sandbox: frame #24: ???[/usr/lib64/firefox/libxul.so +0xc03417]
Sandbox: frame #25: ???[/usr/lib64/firefox/libxul.so +0xc035af]
Sandbox: frame #26: ???[/usr/lib64/firefox/libxul.so +0xbfe61f]
Sandbox: frame #27: ???[/usr/lib64/firefox/libxul.so +0xbfe54e]
Sandbox: frame #28: ???[/usr/lib64/firefox/libxul.so +0x23f1e05]
Sandbox: frame #29: ???[/usr/lib64/firefox/plugin-container +0x7001]
Sandbox: frame #30: ???[/usr/lib64/firefox/plugin-container +0x6cd7]
Sandbox: frame #31: __libc_start_main[/lib64/libc.so.6 +0x20790]
Sandbox: frame #32: _start[/usr/lib64/firefox/plugin-container +0x6e99]
Sandbox: frame #33: ??? (???:???)
Sandbox: end of stack.
```

worked fine prior to upgrade..

I thought maybe it might be related to the gcc 5.4.0 bump to the new ABI..
but I did run `revdep-rebuild --library 'libstdc++.so.6' -- --exclude gcc` and I still have the same issue

--- Here is my emerge info ---
 $ emerge --info
Portage 2.3.3 (python 3.4.5-final-0, default/linux/amd64/13.0/desktop, gcc-5.4.0, glibc-2.23-r3, 4.9.16-gentoo.custom x86_64)
=================================================================
System uname: Linux-4.9.16-gentoo.custom-x86_64-Intel-R-_Core-TM-_i7-3517U_CPU_@_1.90GHz-with-gentoo-2.3
KiB Mem:     8039060 total,    640624 free
KiB Swap:   12206072 total,  11834736 free
sh bash 4.3_p48-r1
ld GNU ld (Gentoo 2.26.1 p1.0) 2.26.1
distcc 3.2rc1 x86_64-pc-linux-gnu [disabled]
app-shells/bash:          4.3_p48-r1::gentoo
dev-java/java-config:     2.2.0-r3::gentoo
dev-lang/perl:            5.24.1-r1::gentoo
dev-lang/python:          2.7.12::gentoo, 3.4.5::gentoo
dev-util/cmake:           3.7.2::gentoo
dev-util/pkgconfig:       0.28-r2::gentoo
sys-apps/baselayout:      2.3::gentoo
sys-apps/openrc:          0.24.2::gentoo
sys-apps/sandbox:         2.10-r3::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69::gentoo
sys-devel/automake:       1.11.6-r1::gentoo, 1.15-r2::gentoo
sys-devel/binutils:       2.26.1::gentoo
sys-devel/gcc:            5.4.0-r3::gentoo
sys-devel/gcc-config:     1.7.3::gentoo
sys-devel/libtool:        2.4.6-r3::gentoo
sys-devel/make:           4.2.1::gentoo
sys-kernel/linux-headers: 4.4::gentoo (virtual/os-headers)
sys-libs/glibc:           2.23-r3::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: git
    sync-uri: git://anongit.gentoo.org/repo/gentoo.git
    priority: -1000

bumblebee
    location: /var/lib/layman/bumblebee
    sync-type: git
    sync-uri: git://github.com/Bumblebee-Project/bumblebee-gentoo
    masters: gentoo

teknocrat_overlay
    location: /usr/local/portage
    sync-type: git
    sync-uri: ssh://git@github.com/Teknocrat/teknocrat-overlay.git
    masters: gentoo

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -O2 -pipe -mtune=native"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-march=native -O2 -pipe -mtune=native"
DISTDIR="/usr/portage/distfiles"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs cgroup clean-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync webrsync-gpg xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LANG="en_US.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j4"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="X a52 aac acl acpi alsa amd64 berkdb bluetooth branding bzip2 cairo caps cdda cdr cli cracklib crypt cups cxx dbus dri dts dvd dvdr egl emboss encode exif fam ffmpeg firefox flac fortran gdbm gif glamor gmp iconv icu imagemagick ipv6 jpeg lcms ldap libnotify mad mng modules mp3 mp4 mpeg mtp multilib ncurses netlink nls nptl nvidia ogg opengl openmp pam pango pcre pdf png ppds qt3support qt5 readline seccomp session spell ssl startup-notification svg tcpd threads tiff truetype udev unicode upower usb v4l vaapi vdpau vim-syntax vorbis wayland wxwidgets x264 xattr xcb xinerama xml xv xvid zlib" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="mmx mmxext sse sse2 sse3 ssse3 sse4 sse4_1 sse4_2 avx" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="libinput void" KERNEL="linux" L10N="en-US en" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en en_US" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-6" PYTHON_SINGLE_TARGET="python3_4" PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby21" USERLAND="GNU" VIDEO_CARDS="nvidia i965 intel" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
Comment 1 Ian Stakenvicius (RETIRED) gentoo-dev 2017-05-08 17:04:59 UTC 
Hi, unfortunately I can't confirm this bug; at the moment the only DRM streaming content I have access to is Netflix, and the UA-mask I have that sometimes makes this work is currently not working.

I haven't found another source of DRM streaming video to use to test WidevineCDM yet, once I do (or once Netflix decides to let streaming work) I will get back to you.
Comment 2 Gino McCarty 2017-05-08 17:40:17 UTC 
(In reply to Ian Stakenvicius from comment #1)
> Hi, unfortunately I can't confirm this bug; at the moment the only DRM
> streaming content I have access to is Netflix, and the UA-mask I have that
> sometimes makes this work is currently not working.
> 
> I haven't found another source of DRM streaming video to use to test
> WidevineCDM yet, once I do (or once Netflix decides to let streaming work) I
> will get back to you.

OK, hmm, so I have this same issue on both my computers with amazon.com as well as netflix.com to get around netflix UA thing, I use UAControl addon with the following string
"Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/580.36 (KHTML, like Gecko) Chrome/55.0.2114.2 Safari/550.36"

Works fine in firefox 52.x

Hope that helps..

PS: 

considering how little feedback this has gotten I suspect I'm the only one having this issue? which is weird since it spans both my laptops..
Comment 3 Ian Stakenvicius (RETIRED) gentoo-dev 2017-05-08 18:32:38 UTC 
OK yeah I can confirm the same.  If I had to guess i think there's an incompatibility between FF53 and that build of widevine, however I don't think there's anything Gentoo can do to address that given we don't have any control over the gmp-widevinecdm build.
Comment 4 Karol Grudziński 2017-05-10 19:28:37 UTC 
Netflix support Linux since March, so there isn't a need for UA change anymore.
https://medium.com/netflix-techblog/update-on-html5-video-for-netflix-fbb57e7d7ca0

Netflix had been working for me on Fx51, then I had the same widevine crash error on Fx52 and it works again in Fx53.

I don't think it has anything to do with GCC because as I can see in 'genlop -it gcc' I use gcc-5.4.0 since July 2016.


And my emerge --info:
$ emerge --info
Portage 2.3.5 (python 3.5.3-final-0, default/linux/amd64/13.0/desktop/plasma, gcc-5.4.0, glibc-2.24-r1, 4.10.13-gentoo x86_64)
=================================================================
System uname: Linux-4.10.13-gentoo-x86_64-Intel-R-_Core-TM-_i3_CPU_M_370_@_2.40GHz-with-gentoo-2.3
KiB Mem:     8027628 total,   3148483 free
KiB Swap:    5983228 total,   5981504 free
Timestamp of repository gentoo: Wed, 10 May 2017 11:02:15 +0000
sh bash 4.4_p12
ld GNU ld (Gentoo 2.27 p1.0) 2.27
ccache version 3.3.4 [disabled]
app-shells/bash:          4.4_p12::gentoo
dev-java/java-config:     2.2.0-r3::gentoo
dev-lang/perl:            5.24.1-r1::gentoo
dev-lang/python:          2.7.13::gentoo, 3.4.6::gentoo, 3.5.3::gentoo, 3.6.1-r1::gentoo
dev-util/ccache:          3.3.4::gentoo
dev-util/cmake:           3.8.1::gentoo
dev-util/pkgconfig:       0.29.2::gentoo
sys-apps/baselayout:      2.3::gentoo
sys-apps/openrc:          0.25::gentoo
sys-apps/sandbox:         2.10-r4::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69-r3::gentoo
sys-devel/automake:       1.11.6-r2::gentoo, 1.13.4-r1::gentoo, 1.14.1-r1::gentoo, 1.15-r2::gentoo
sys-devel/binutils:       2.27::gentoo
sys-devel/gcc:            5.4.0-r3::gentoo
sys-devel/gcc-config:     1.8-r1::gentoo
sys-devel/libtool:        2.4.6-r4::gentoo
sys-devel/make:           4.2.1-r1::gentoo
sys-kernel/linux-headers: 4.10::gentoo (virtual/os-headers)
sys-libs/glibc:           2.24-r1::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: git
    sync-uri: git://github.com/gentoo-mirror/gentoo.git
    priority: -1000
                                                                                
-- I CUT OVERLAY LIST --

ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -Os -pipe -flto=4 -fuse-linker-plugin"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php7.1/ext-active/ /etc/php/cgi-php7.1/ext-active/ /etc/php/cli-php7.1/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/splash /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-march=native -Os -pipe -flto=4 -fuse-linker-plugin"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--quiet-build=n"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="     http://gentoo.prz.rzeszow.pl     http://ftp.uni-erlangen.de/pub/mirrors/gentoo     http://www.mirrorservice.org/sites/distfiles.gentoo.org/     http://mirror.qubenet.net/mirror/gentoo/     http://mirror.leaseweb.com/gentoo/     http://mirror.bytemark.co.uk/gentoo/      http://ftp.jaist.ac.jp/pub/Linux/Gentoo/     http://ftp.twaren.net/Linux/Gentoo/      http://ftp-stud.hs-esslingen.de/pub/Mirrors/gentoo/     http://mirror.bytemark.co.uk/gentoo/   http://tux.rainside.sk/gentoo/  ftp://tux.rainside.sk/gentoo/   http://mirror.netcologne.de/gentoo/     http://mirrors.evowise.com/gentoo/"
LANG="pl_PL.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -flto=4 -fuse-linker-plugin"
MAKEOPTS="-j4"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_EXTRA_OPTS="--exclude-from=/etc/portage/rsync_excludes --progress"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="X a52 aac acl acpi alsa amd64 avahi bash-completion berkdb bluetooth branding bzip2 cairo caps cdda cdr cli consolekit cracklib crypt cups cxx dbus declarative djvu dri dts dvd dvdr emboss encode exif faac fam ffmpeg firefox flac fontconfig fortran gdbm gif glamor gmp gtk iconv icu ipv6 jpeg kde kipi kwallet lcms ldap libass libnotify lzma mad mmx mmxext mng modules mp3 mp4 mpeg multilib musepack ncurses networkmanager nls nptl nptlonly ogg opengl openmp pam pango pch pcre pdf phonon pic plasma png policykit popcnt ppds pulseaudio qml qt3support qt4 qt5 quicktime readline scanner sdl seccomp semantic-desktop session spell sqlite sse sse2 sse3 sse4_1 sse4_2 ssl ssse3-h startup-notification svg tcpd theora threads tiff truetype udev udisks unicode upower usb vaapi vcd vdpau vorbis vpx widgets wmf wxwidgets x264 xattr xcb xcomposite xinerama xml xscreensaver xv xvid xvmc zeroconf zlib" ABI_X86="64" ALSA_CARDS="hda-intel" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" GRUB_PLATFORMS="pc multiboot" INPUT_DEVICES="evdev synaptics" KERNEL="linux" L10N="pl en is nb no nn nb_NO nn_NO" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="nlpsolver pdfimport presenter-console presenter-minimizer" LINGUAS="pl en is nb no nn nb_NO nn_NO" NETBEANS_MODULES="cnd ide nb dlight harness websvccommon webcommon php ergonomics enterprise profiler java mobility apisupport extide" NGINX_MODULES_HTTP="access auth_basic autoindex fastcgi gzip gzip_static memcached proxy rewrite userid upload uwsgi securelink http2 push_stream v2" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-6" PYTHON_SINGLE_TARGET="python3_5" PYTHON_TARGETS="python2_7 python3_4 python3_5 python3_6" QEMU_SOFTMMU_TARGETS="i386 x86_64" QEMU_USER_TARGETS="i386 x86_64" RUBY_TARGETS="ruby21 ruby22" SANE_BACKENDS="hp" USERLAND="GNU" VIDEO_CARDS="nvidia" VMWARE_GUEST="linux windows" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, USE_PYTHON
Comment 5 Ian Stakenvicius (RETIRED) gentoo-dev 2017-05-12 13:39:17 UTC 
(In reply to Karol Grudziński from comment #4)
> 
> Netflix had been working for me on Fx51, then I had the same widevine crash
> error on Fx52 and it works again in Fx53.
> 


Sorry, so you're saying it -works- for you with 53.0 ?  I'm seeing the opposite of the above (and the same as the OP), works in 52 but broken in 53.
Comment 6 Ian Stakenvicius (RETIRED) gentoo-dev 2017-05-12 21:14:00 UTC 
Ok I just pushed one patch from https://bugzilla.mozilla.org/show_bug.cgi?id=1286865 (as referred to in https://bugzilla.mozilla.org/show_bug.cgi?id=1364533 ) that allows widevinecdm to do its thing.  It's in firefox-53.0-r1 on mozilla-overlay.  Please test, if this is sufficient I'll push it to the main tree.  

Apparently the bug is fixed on firefox-54.
Comment 7 Gino McCarty 2017-05-13 17:20:38 UTC 
OK I compiled firefox from the overlay, and the bug is fixed! thanks!
I was able to watch netflix without issue.

Here is the text output FWIW, 

Sandbox: seccomp sandbox violation: pid 2776, syscall 28, args 139898197639168 2097152 15 1612 139898199736656 0.
Sandbox: seccomp sandbox violation: pid 2776, syscall 28, args 139898132627456 2097152 15 139898197680336 0 1441792.
Sandbox: seccomp sandbox violation: pid 2776, syscall 28, args 139898134724608 2097152 15 139898199736640 139898199736656 0.
Sandbox: seccomp sandbox violation: pid 2776, syscall 28, args 139898130530304 2097152 15 139898199736640 0 1613824.
Sandbox: seccomp sandbox violation: pid 2776, syscall 28, args 139898128433152 2097152 15 139898199736640 139898199736656 0.

(In reply to Ian Stakenvicius from comment #6)
> Ok I just pushed one patch from
> https://bugzilla.mozilla.org/show_bug.cgi?id=1286865 (as referred to in
> https://bugzilla.mozilla.org/show_bug.cgi?id=1364533 ) that allows
> widevinecdm to do its thing.  It's in firefox-53.0-r1 on mozilla-overlay. 
> Please test, if this is sufficient I'll push it to the main tree.  
> 
> Apparently the bug is fixed on firefox-54.
Comment 8 Jory A. Pratt gentoo-dev 2017-05-15 11:16:18 UTC 
*** Bug 618064 has been marked as a duplicate of this bug. ***
Comment 9 Jory A. Pratt gentoo-dev 2017-08-26 17:57:07 UTC 
If you feel I have closed your bug and it is still a current issue, please reopen and update it completely. We will not work bugs that have no ebuild in tree any longer or can not be reproduced with a current system.

Thank You for your support and understanding
The Mozilla Team